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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 
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- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 
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1 )I3 Responsive to communication(s) filed on 31 July 2000 . 
2aM This action is FINAL. 2b)n This action is non-final. 

3) n Since this application is in condition for allowance except for fomial matters, prosecution as to the merits is 

closed in accordance with the practice under Exparfe Quay/e, 1935 CD. 11, 453 O.G. 213. 
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Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
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DETAILED ACTION 
Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of appUcation for patent in the United States. 

2. Claims 1, 10-15, 17, 26-31 are rejected under 35 U.S.C. 102(b) as anticipated by Patent 
No. 5677952 Blakley, III et al. 

3. Regarding claims 1 and 15, Blakley shows a disk drive comprising: 

(a) a disk for storing data, the disk comprising a public area for storing plaintext data and 
a pristine area for storing encrypted data (Blakley, col. 6, line 67); 

(b) a head for reading the encrypted data from the pristine area (it is the interpretation of 
this examiner that encrypted data is read from an area or disk sector where the data is stored. It is 
considered pristine because it cannot be read without password authorization, (Blakley, col. 6, 
line 4-5, 23-24) of the disk 4 (head is feature of a disk drive device, see definition sited from MS 
Computer Dictionary)); 

(c) a control system for controlling access to the pristine area of the disk (disk controller, 
Blakley, fig. 3, label 35); 

(d) authentication circuitry for authenticating a request received from an external entity to 
access the pristine area of the disk and for enabling the control system if the request is 
authenticated (operating system, Blakley, fig. 3, label 78, 80, col. 6, 23-24); 
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(e) a secret drive key (secret key, dependent on the user password, Blakley, col. 5, line 
45-47); and 

(f) decryption circuitry, responsive to the secret drive key, for decrypting the encrypted 
data stored in the pristine area of the disk to generate decrypted data (device driver, Blakley, col 
4, line 66-67, col. 5, line 1, fig. 3, label 76). 

4. Regarding claim 10, Blakley shows the disk drive of claim 1 above, and further show the 
encrypted data comprises encrypted message data (Blakley, col. 10, line 18-19). 

5. Regarding claim 11, Blakley shows the disk drive of claim 1 above, and further show the 
disk drive further comprises encryption circuitry for encrypting plaintext data into the encrypted 
data stored in the pristine area (Blakley, col. 5, line 27-28, col. 6, line 66). 

6. Regarding claim 12, Blakley shows the disk drive of claim 1 above, and further show: 

(a) the disk further comprises embedded servo sectors comprising servo bursts 
(read/write, col. 5, line 26-28); 

(b) the control system comprises a servo control system responsive to the embedded 
servo sectors (disk controller, Blakley, fig. 3, label 35); and 

(c) the authentication circuitry enables the servo control system (operating system, 
Blakley, fig. 3, label 78, 80, col. 6, 23-24). 

7. Regarding claim 13, Blakley shows the disk drive of claim 12, wherein: 

(a) the servo bursts are written to the disk in encrypted form (write, Blakley, col. 5, line 
26-28, 39-40); and 

(b) the authentication circuitry enables the servo control system to decrypt the servo 
bursts (read, Blakley, col. 5, line 26-28, col. 6, line 35-36). 
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8. Regarding claim 14, Blakley shows the disk drive of claim 13, and further show: 

(a) the servo bursts are written to the disk with additive noise generated from a pseudo 
random sequence (it is this examiners understanding that this is an inherent behavior driven by 
the data stream written to disk via the disk drive mechanism, where in this case the data being 
written is effected by the encryption key); 

(b) the pseudo random sequence is generated from a polynomial (pseudorandom 
generator, col 8, line 40); 

(c) the servo control system uses the polynomial to decrypt the servo bursts (read, 
Blakley, col 5, line 26-28, col 6, line 35-36); and 

(d) the authentication circuitry provides the polynomial to the servo control system 
(password determines secret key, Blakley, col 7, hne 43-47). 

9. Regarding claim 17, Blakley show a method of processing a request received by a disk 
drive from an external entity to access encrypted data stored in a pristine area of a disk, the 
method comprising the steps of 

(a) authenticating the request to access the pristine area and enabling access to the 
pristine area if the request is authenticated (Blakley, col 6, line 21-24, 27-28); 

(b) reading the encrypted data stored in the pristine area (Blakley, col 7, line 15-20); and 

(c) decrypting the encrypted data using a secret drive key within the disk drive to 
generate decrypted data (Blakley, col 11, line 45-49). 

10. Regarding claim 26, see reasoning for claim 10 above. 

1 1 . Regarding claim 27, see reasoning for claim 1 1 above. 
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12. Regarding claim 28, Blakley show method as recited in claim 17 above, an further show 
the disk comprises embedded servo sectors comprising servo bursts, the method further 
comprising the steps of 

(a) servoing a head over the disk in response to the embedded servo sectors (disk 
controller, Blakley, fig. 3, label 35); and 

(b) enabling servoing in the pristine area if the request is authenticated read, (Blakley, 
col. 5, line 26-28, col. 6, line 35-36). 

13. Regarding claim 29, see reasoning in claim 13 above. 

14. Regarding claim 30, see reasoning in claim 14 above. 

1 5. Regarding claim 3 1 , Blakley show a method of processing a request received by a disk 
drive from an external entity to access data stored on a disk, the disk comprising a public area for 
storing plaintext data and a pristine area for storing encrypted data, the method comprising the 
steps of 

(a) decrypting the encrypted data stored in the pristine area of the disk using a secret 
drive key within the disk drive to generate decrypted data (Blakley, col. 4, line 66-67, col 5, line 
1, fig. 3, label 76); and 

(b) using the decrypted data to authenticate the request received from the external entity 
before allowing access to the disk (Blakley, fig. 3, label 78, 80, col. 6, 23-24). 

Claim Rejections - 35 USC § 103 

16. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

17. Claims 9, 25 are rejected under 35 U.S.C. 103(a) as being unpatentable over Patent No. 
5677952 Blakley, III et al. in view of Patent No. 5235641 Nozawa et al. 

18. Regarding claim 9, Blakley shows the disk drive of claim 1 above, but fails to show 
wherein the encrypted data comprises encrypted key data for decrypting an encrypted message. 

However Nozawa et al. teach by causing the cryptographic device on the upper rank 
apparatus side to perform complicated and high-degree encryption of the data key, the encrypted 
data key and ordinary data encrypted on the basis of the data key in the external storage device 
can be safely and easily stored in one and the same recording medium. (Nozawa, col. 9, line 38- 
43). 

Therefore, it would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Blakley as per teaching of Nozawa et al. such that the data key and the data 
encrypted by the data key can be managed safely and easily (Nozawa, col. 9, line 44-45). 

19. Regarding claim 25, Blakley shows the disk drive of claim 17 above, but fails to show 
wherein the encrypted data comprises encrypted key data for decrypting an encrypted message. 

However Nozawa et al. teach by causing the cryptographic device on the upper rank 
apparatus side to perform complicated and high-degree encryption of the data key, the encrypted 
data key and ordinary data encrypted on the basis of the data key in the external storage device 
can be safely and easily stored in one and the same recording medium. (Nozawa, col. 9, line 38- 
43). 
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Therefore, it would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Blakley as per teaching of Nozawa et al, such that the data key and the data 
encrypted by the data key can be managed safely and easily (Nozawa, col. 9, line 44-45). 

20. Claims 2-8, 18-24 are rejected under 35 U.S.C. 103(a) as being unpatentable over Patent 
No. 5677952 Blakley, III et al. in view of Patent No. EP 816967 A2 Scott et al. 

21. Regarding claim 2, Blakley shows the disk drive of claim 1 above, but fail to show the 
encrypted data comprises encrypted authentication data. 

However, Scott et al. shows method of creating a secure file by receiving an indication 
that an entity desires to perform a file access operation on a file of the data processing system; 
obtaining a private key of the entity; receiving data of the file to be created; determining a 
checksum (authentication data) of the file; encrypting the checksum using the private key; and 
creating the file and an associated affidavit that includes the encrypted checksum (Scott, col. 2, 
line 30-36). 

Therefore, it would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Blakley et al. as per teaching of Scott et al. to include the method to gain the 
advantage of an automatic and transparent method of checking and authenticating software and 
data in a computer system. 

22. Regarding claim 3, Blakley shows disk drive of claim 2 above, and further show the 
authentication circuitry is responsive to the decrypted data (Blakley, col. 7, line 15-20). 

23. Regarding claim 4, Blakley shows the disk drive of claim 2 above, and further show the 
encrypted authentication data comprises encrypted user authentication data (password, Blakley, 
col. 5, line 66-67). 
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24. Regarding claim 5, Blakley shows the disk drive of claim 2 above, and further show the 
encrypted authentication data comprises encrypted device authentication data for authenticating a 
device, the device comprising a unique device ID configured during manufacture of the device 
(Blakley, col. 11, line 45-49), 

25. Regarding claim 6, Blakley shows the disk drive of claim 2 above, and further show the 
encrypted authentication data comprises encrypted information for implementing a challenge and 
response verification sequence device (queries, Blakley, col. 5, line 43-44). 

26. Regarding claim 7, Blakley shows the disk drive of claim 2 above, and further show the 
encrypted authentication data comprises encrypted message authentication data (checksum, 
Scott, col 2, line 34). 

27. Regarding claim 8, Blakley shows the disk drive of claim 7 above, and further show the 
encrypted authentication data comprises encrypted key data (secret or private key) for generating 
a message authentication code (Blakley, col. 5, line 66-67, Scott, col. 7, line 23-24). 

28. Regarding claim 18, Blakley shows the disk drive of claim 2 above, but fail to show the 
encrypted authentication data comprises encrypted message authentication data. 

However, Scott et al. shows method of creating a secure file by receiving an indication 
that an entity desires to perform a file access operation on a file of the data processing system; 
obtaining a private key of the entity; receiving data of the file to be created; deteraiining a 
checksum (message authentication data) of the file; encrypting the checksum using the private 
key; and creating the file and an associated affidavit that includes the encrypted checksum (Scott, 
col. 2, line 30-36). 
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Therefore, it would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Blakley et al. as per teaching of Scott et al. to include the method to gain the 
advantage of an automatic and transparent method of checking and authenticating software and 
data in a computer system. 

29. Regarding claim 19, Blakley and Scott show method as recited in claim 18 above, and 
further show wherein the step of authenticating is responsive to the decrypted data (Scott, coL 7, 
29-30, Blakley, col. 6, line 32, 35-36). 

30. Regarding claim 20, Blakley and Scott show method as recited in claim 1 8 above, and 
further show the encrypted authentication data comprises encrypted user authentication data 
(password, Blakley, col. 5, line 66-67). 

3 1 . Regarding claim 21, see reasoning for claim 5 above. 

32. Regarding claim 22, see reasoning for claim 6 above. 

33. Regarding claim 23, see reasoning for claim 7 above. 

34. Regarding claim 24, see reasoning for claim 8 above. 



Remarks 



35. Applicant's arguments filed 4/22/04 on pages 8-1 1 have been fully considered but they 
are not persuasive. 

• Regarding claim 1 , Applicant contests that Blakley does not disclose an authentication 
facility within a disk drive. This examiner respectfully disagrees. By changing the 
location of the authentication facility within the computer in Blakley, which houses the 
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disk drive, closer to the disk drive does not change the behavior of the system described 
in Blakley. Additionally, Applicant contests that Blakley does not disclose a disk drive 
that comprises a secret drive key. This examiner respectfully disagrees. Blakley' s system 
does disclose that a key is derived from the information dependent on user password, 
which is a secret stored in the device along with a unique identifier of the device 
(Blakley, col. 46-50, col. 6, line 21-23), thusly the secret key, in essence, is stored within 
the disk drive. 

• Regarding claim 2, Applicant contests that Scott discloses decrypt the authentication data 
and to perform the authentication process in the host computer rather than in the disk 
drive. This examiner respectfully disagrees. By changing the location of the 
authentication facility within the host computer in Scott, which houses the disk drive, 
closer to the disk drive does not change the behavior of the system described in Scott. 

• Regarding claim 1 1 , Applicant contests that Blakley does not disclose the implementation 
of the encryption facility within the disk drive. This examiner respectfully disagrees. By 
changing the location of the encryption facility within the host computer, which houses 
the disk drive, closer to the disk drive does not change the behavior of the system 
described in Blakley. 

• Regarding claim 12, Applicant contests that Blakley does not disclose the implementation 
of an authentication facility within the disk drive for enabling the servo control system. 
This examiner respectfully disagrees. As stated above, by changing the location of the 
authentication facility within the host computer in Blakley, which houses the disk drive, 
closer to the disk drive does not change the behavior of the system described in Blakley. 
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Furthermore, the functionaHty of read/write after authentication in Blakely imphes that 
the mechanical functionalities of the disk drive are used to access the encrypted data only 
after successful authentication. It is well know in the arts that said mechanisms, such as 
the servo control system, are an integral part of disk drive systems. Thusly, the device 
driver to carry out the operations that enable the servo control system translates the 
read/write requests. 

• Regarding claim 13,14, Applicant contests that Blakley does not disclose to encrypt servo 
bursts written in the embedded servo sectors, let alone to encrypt the servo bursts using 
additive noise generated fi-om a pseudo random sequence. This examiner respectfully 
disagrees. This behavior is inherent to the disk drive system. The servo bursts are the 
properties of the disk heads read/write fiinction. The Blakley' s secret key (which is 
produced by a pseudo random fimction, col. 5, line 60-64) that is interacting with the 
plain text data being written on to the disk. The interacting result is interpreted as additive 
noise. 

• Regarding claim 15, 3 1, AppHcant contests that Blakley does not disclose identification 
data used to authenticate a particular user is not stored in an encrypted form. This 
examiner respectfiilly disagrees. The identification data used to authenticate the user 
(password) is verified by checking a one-way (encrypted form) function against 
information stored in the computing device (Blakley, col. 5, Hne 1-7, col. 6, line 20-23). 



Conclusion 
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36. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

Patent No. 5,465,183 Hattori: teaches : teaches disk drive mechanism. 
Patent No. 5,583,712 Brunelle: teaches disk drive mechanism such as the servo and its 
relation to read/write functionality. 

37. THIS ACTION IS MADE FINAL. AppHcant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Mossadeq Zia whose telephone number is 703-305-8425. The 
examiner can normally be reached on Monday-Friday between 8:30am - 5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Greg Morse can be reached on 703-308-4789. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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Examiner 
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